NVD

Id
50757  
Name
CVE-2009-3558  
Description
The posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass open_basedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-11-23  
Modified Date
2010-04-01  
Seq
2009-3558  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
256713 50757 CVE-2009-3558 APPLE-SA-2010-03-29-1  View
256714 50757 CVE-2009-3558 [php-announce] 20091119 5.3.1 Release announcement  View
256715 50757 CVE-2009-3558 6600  View
256716 50757 CVE-2009-3558 http://support.apple.com/kb/HT4077  View
256717 50757 CVE-2009-3558 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/posix/posix.c?view=log  View
256718 50757 CVE-2009-3558 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/posix/posix.c?view=log  View
256719 50757 CVE-2009-3558 http://svn.php.net/viewvc?view=revision&revision=288943  View
256720 50757 CVE-2009-3558 MDVSA-2009:285  View
256721 50757 CVE-2009-3558 MDVSA-2009:302  View
256722 50757 CVE-2009-3558 MDVSA-2009:303  View
256723 50757 CVE-2009-3558 [oss-security] 20091120 CVE request: php 5.3.1 update  View
256724 50757 CVE-2009-3558 [oss-security] 20091120 Re: CVE request: php 5.3.1 update  View
256725 50757 CVE-2009-3558 [oss-security] 20091120 Re: CVE request: php 5.3.1 update  View
256726 50757 CVE-2009-3558 http://www.php.net/ChangeLog-5.php  View
256727 50757 CVE-2009-3558 http://www.php.net/releases/5_2_12.php  View
256728 50757 CVE-2009-3558 http://www.php.net/releases/5_3_1.php  View
256729 50757 CVE-2009-3558 ADV-2009-3593  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41396 JVNDB-2009-002403 PHP の posix_mkfifo 関数における open_basedir の制限を回避される脆弱性 PHP の posix_mkfifo 関数には、open_basedir の制限を回避される、または FIFO ファイルを作成される脆弱性が存在します。 CVE-2009-3558 40989 CVE-2009-3558 50757 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002403.html 2009-11-23 2010-04-15 View